Analysis
-
max time kernel
124s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
21/09/2024, 06:35
General
-
Target
ef3df5a359023af43d387dd79ccab98b_JaffaCakes118.exe
-
Size
118KB
-
MD5
ef3df5a359023af43d387dd79ccab98b
-
SHA1
daac889b9d857f4f79e7423f870ae8cabdff4ee0
-
SHA256
16613001376c1399dc83b00bfc230c22c7a4b32d232f90ad841b5fe5c8b5a77c
-
SHA512
15ceb83f1810763f70b66bd6b21bee5a16fae2c13ffc2d03dc54880b55a759f2995c43a606d6f695a6093b7879ce3fc80a590fbff479b624ff921c0cbc34a018
-
SSDEEP
3072:2ld3v1inaWQSLuRkFT0FCRFrqDF5e3vv0R9aO:2X39OaPXVkRFry0fcRB
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ef3df5a359023af43d387dd79ccab98b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ef3df5a359023af43d387dd79ccab98b_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx